[SENTRY-1122] Allow Solr Audit Log to Read Impersonator Info

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.0
• Fix Version/s: 1.7.0
• Component/s: Solr Plugin
• Assignee: Gregory Chanan
• Reporter: Gregory Chanan
• Created: 08/Mar/16 23:45
• Updated: 10/Mar/16 22:03
• Resolved: 10/Mar/16 22:03

Description

Currently, the impersonator info written by Sentry is always null:

 
String impersonator = null; // FIXME

(https://github.com/apache/incubator-sentry/blob/b095b5b991a164983163390f0c8c6f78557d017e/sentry-solr/solr-sentry-core/src/main/java/org/apache/solr/sentry/SentryIndexAuthorizationSingleton.java#L129)

Like with the user name, we should read out an http request attribute to fill in this info. It is up to the underlying Solr authentication filter to fill this info in; that's outside of the scope of Sentry, but this at least allows that to be done.

Issue Links

• links to: Review Request